$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json) Hash identifier: SfvPi7d8m6DEopfkZfrcGAKQKgDuVq+F8hTJzYKhxPs= Subject key identifier: A1:B0:E0:94:BB:66:88:3A:37:C0:A1:43:F2:FC:00:18:15:AF:42:D3 Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Certificate serial: 3A71727467E9E32AB6FE668FC7C64499895FD62E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft Manifest number: 0427 Signing time: Wed 01 May 2024 07:51:04 +0000 Manifest this update: Wed 01 May 2024 07:46:04 +0000 Manifest next update: Sat 04 May 2024 10:36:04 +0000 Files and hashes: 1: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: Va4tPC22bM2R773KoBcoI7/GU5r/BBlbCAG8dUnwIf0=) 2: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: BAGby26QuMGdhlsFVIJFaU/A0uhykz9x2Q/LGf52CB0=) 3: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: iI8NZtkp5fsWFxaLKRyKRjdbry3jxFP21XMIXcUaeWQ=) 4: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: 5wX6jJnWnnHHzX/VqvKgJiAHR72Di5B+DPg8BQumtqM=) 5: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: xPu4MaJ1Ex5OsGN/PlkQZBoAFEGuQn4DnsRDSiEV2xA=) 6: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: +nDtlT3xAOTXpOYO31IZulCWcoaWoP+VdiSKh3LmXZc=) 7: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: e5ewcFJRxzK/0Z2sEt56z3/VqQWmBHyaNNJjnsuTHZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 10:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:71:72:74:67:e9:e3:2a:b6:fe:66:8f:c7:c6:44:99:89:5f:d6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Validity Not Before: May 1 07:46:04 2024 GMT Not After : May 4 10:36:04 2024 GMT Subject: CN=A1B0E094BB66883A37C0A143F2FC001815AF42D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:df:df:78:60:39:15:c0:fc:6a:fd:93:da: c3:20:26:a9:2a:4d:89:02:0b:d4:81:7f:fe:a9:f6: ca:ee:56:87:87:43:6a:dd:3d:77:c5:2e:65:7f:64: 7f:cc:31:28:cc:c8:58:14:a4:44:79:bf:62:69:21: e3:0e:1c:29:a3:b4:94:4b:ec:09:6c:8c:b1:2c:05: 49:f2:70:a8:e9:2c:8c:0e:98:d1:92:f6:34:9a:71: 12:2d:69:e7:9b:f8:dc:14:3e:ab:3b:09:7a:e2:b6: f5:cc:e9:2d:e9:33:a8:b1:86:8e:27:a9:2d:7a:cd: 9d:b2:fd:de:20:7e:6c:4f:b2:dc:8a:37:b3:7c:e0: 8f:87:c5:f5:d3:b6:95:33:68:52:54:91:9b:27:6b: 12:89:c7:34:6b:4d:a0:5c:80:53:3d:7e:af:cb:02: a2:9d:81:fb:af:f3:43:f9:3a:f9:bf:17:d8:9b:8f: 1c:4b:45:54:ff:9e:40:4f:24:d4:34:cd:1f:76:57: a1:1f:2b:27:c0:54:a5:f9:a1:c1:a9:a2:93:f8:db: 09:a7:29:3a:d9:cf:cf:79:c7:7e:27:65:13:8d:71: a2:f9:bf:0e:de:59:7a:8b:1c:2a:40:9e:60:c4:2d: f7:58:f0:bd:bb:ac:9d:f2:2b:2d:a8:3e:18:df:89: da:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B0:E0:94:BB:66:88:3A:37:C0:A1:43:F2:FC:00:18:15:AF:42:D3 X509v3 Authority Key Identifier: keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:66:5d:11:a3:f6:ce:33:c2:ec:09:c4:a3:32:e8:26:b4:30: f8:30:27:c2:83:f3:3f:27:01:b4:74:fd:d3:f0:f0:d7:ee:18: 9e:6a:53:a9:40:50:00:60:16:0e:94:50:64:f7:f0:fd:42:33: 14:88:0f:09:f6:15:80:e0:33:74:66:66:ac:ae:8b:36:1c:f1: 00:d3:47:7d:0d:0f:8a:af:cf:1b:7e:1f:12:a7:61:3a:b1:99: 33:9d:36:86:59:11:e5:35:3f:a7:f8:85:7e:1e:38:1a:7f:e4: a1:57:0b:62:e4:1f:2e:ed:fe:75:78:8b:66:6a:4b:25:0c:9c: 11:06:6e:94:f4:1e:26:a1:67:2b:57:30:c5:1a:6d:9a:08:7e: fc:ec:18:b5:40:f1:1a:9f:81:4b:0b:f3:c2:5c:2b:6a:4f:39: 66:69:da:ba:2e:03:eb:18:d8:ab:0d:2f:9b:67:0d:be:50:29: b0:41:0f:d8:b4:58:b0:6a:91:0a:2f:6b:ad:67:8e:d2:7a:85: a8:e1:dc:7a:69:00:c3:e5:97:11:3b:23:34:30:99:3b:78:93: 53:9e:e8:6b:f3:27:89:38:51:ea:39:85:86:10:69:a8:2e:46: 07:02:61:73:6b:46:82:51:a8:de:cb:8f:c2:0f:a0:2e:bb:ed: 8c:7b:3c:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOnFydGfp4yq2/maPx8ZEmYlf1i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG REQ5N0I5ODAeFw0yNDA1MDEwNzQ2MDRaFw0yNDA1MDQxMDM2MDRaMDMxMTAvBgNV BAMTKEExQjBFMDk0QkI2Njg4M0EzN0MwQTE0M0YyRkMwMDE4MTVBRjQyRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyt/feGA5FcD8av2T2sMgJqkq TYkCC9SBf/6p9sruVoeHQ2rdPXfFLmV/ZH/MMSjMyFgUpER5v2JpIeMOHCmjtJRL 7AlsjLEsBUnycKjpLIwOmNGS9jSacRItaeeb+NwUPqs7CXritvXM6S3pM6ixho4n qS16zZ2y/d4gfmxPstyKN7N84I+HxfXTtpUzaFJUkZsnaxKJxzRrTaBcgFM9fq/L AqKdgfuv80P5Ovm/F9ibjxxLRVT/nkBPJNQ0zR92V6EfKyfAVKX5ocGpopP42wmn KTrZz895x34nZRONcaL5vw7eWXqLHCpAnmDELfdY8L27rJ3yKy2oPhjfidrTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUobDglLtmiDo3wKFD8vwAGBWvQtMwHwYDVR0j BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5 N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1 OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZmXRGj9s4zwuwJxKMy6Ca0MPgwJ8KD8z8n AbR0/dPw8NfuGJ5qU6lAUABgFg6UUGT38P1CMxSIDwn2FYDgM3RmZqyuizYc8QDT R30ND4qvzxt+HxKnYTqxmTOdNoZZEeU1P6f4hX4eOBp/5KFXC2LkHy7t/nV4i2Zq SyUMnBEGbpT0HiahZytXMMUabZoIfvzsGLVA8RqfgUsL88JcK2pPOWZp2rouA+sY 2KsNL5tnDb5QKbBBD9i0WLBqkQova61njtJ6hajh3HppAMPllxE7IzQwmTt4k1Oe 6GvzJ4k4Ueo5hYYQaaguRgcCYXNrRoJRqN7Lj8IPoC677Yx7PBg= -----END CERTIFICATE-----Generated at Wed May 1 10:09:32 2024 by rpki-client on console-ams.rpki-client.org